Advisories · Technology
Syslifters sysreptor.
Every CVE that names Syslifters sysreptor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.7 Low
SysReptor: Session Fixation in Password-Protected Shared Notes
- Syslifters sysreptor
- Authentication bypass
- CVSS 4.2 Medium
SysReptor: Unauthorized file disclosure by broken access control in writable shared notes
- Syslifters sysreptor
- Broken access control
- CVSS 8.8 High
SysReptor: Authenticated RCE by insecure image processing
- Syslifters sysreptor
- CWE-20
- CVSS 8.1 High
SysReptor: Host header injection might allow account takeover
- Syslifters sysreptor
- CWE-807
- CVSS 3.5 Low
SysReptor: Anonymous note-share link discloses project member identities and non-shared note activity
- Syslifters sysreptor
- Broken access control
- CVSS 3.8 Low
SysReptor: Privilege Escalation from User Admin to Superuser
- Syslifters sysreptor
- Privilege escalation
- CVSS 6.8 Medium
SysReptor: Read-write access to personal notes by sharing-link creation with no authorization in SysReptor Professional
- Syslifters sysreptor
- Broken access control
- CVSS 7.3 High
SysReptor Vulnerable to an Authenticated Stored Cross-Site Scripting (XSS)
- Syslifters sysreptor
- Cross-site scripting (XSS)
- CVSS 8.1 High
SysReptor Susceptible to Privilege Escalation by Authenticated Users
- Syslifters sysreptor
- Privilege escalation